Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: kJcfmcamWQ9nhUu3LPSIC2rauI5eJ/CBS8ohiEoLM4s=
Subject key identifier: D2:63:59:BC:01:FF:A3:46:9E:24:64:37:AA:60:0C:FD:F3:62:8F:EB
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 019CA9EB36D9443122F8DCFBC5C030D8D7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0CA5
Signing time: Sun 01 Mar 2026 15:01:30 +0000
Manifest this update: Sun 01 Mar 2026 15:01:30 +0000
Manifest next update: Mon 02 Mar 2026 15:01:30 +0000
Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: 79xWkkYMaOH/athVg6USGJXMUdAXSdfKH32nMHhHahU=)
2: _cYlNrPZ4aNJF3IHILF10hUz1QE.roa (hash: 055GVfTacul6sO6E7JP7r8Y/ZviD+fN14ITbu8RYmeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:36:d9:44:31:22:f8:dc:fb:c5:c0:30:d8:d7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Mar 1 15:01:30 2026 GMT
Not After : Mar 2 15:01:30 2026 GMT
Subject: CN=d26359bc01ffa3469e246437aa600cfdf3628feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:45:4f:09:d9:4d:eb:70:c4:68:9d:1b:0f:
12:56:65:c6:e3:61:1d:68:8b:c6:ee:8d:34:2b:a7:
fd:b4:53:7d:9f:ab:d9:98:20:cd:85:03:df:91:b1:
82:41:52:39:7c:0b:e3:f3:58:ae:5e:a7:4d:ae:6d:
bb:41:97:0f:79:6e:d1:45:f7:65:5e:f0:40:c1:8c:
8f:68:86:22:38:da:2d:7c:fc:b8:3e:6e:a6:8b:5e:
ec:4b:47:6c:c7:4e:0b:32:dc:a8:39:44:07:68:e4:
b8:61:10:df:35:0a:f3:78:ee:0d:52:51:68:f7:72:
01:fc:bf:c4:a6:06:47:b7:df:8c:fa:c7:7c:65:7a:
e7:a4:c0:6c:27:ee:77:60:42:15:6c:5e:54:f8:26:
66:1e:22:ce:03:57:44:01:b4:14:49:0f:8d:a7:13:
59:ed:41:b0:67:58:34:f7:2c:db:5d:6c:a6:e4:72:
15:17:b0:ab:50:d2:e0:90:58:f4:29:ab:26:01:99:
c4:16:4a:b9:d4:3b:d7:c8:b9:c4:ae:96:05:a2:24:
34:83:e3:63:c6:fe:6c:3a:a2:51:7e:e0:47:01:c7:
3b:4c:a4:2a:ca:5b:20:4b:93:95:58:54:8c:af:fb:
b1:c5:30:f8:cb:e1:cf:9f:55:57:1a:b1:e4:0f:9f:
69:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:63:59:BC:01:FF:A3:46:9E:24:64:37:AA:60:0C:FD:F3:62:8F:EB
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b4:0d:69:15:29:25:2b:1c:43:e1:43:0f:a9:e3:65:89:21:
ff:19:4b:5c:8a:b8:6e:1e:17:ae:75:f4:9a:27:96:a5:92:8e:
b1:22:c7:ee:51:9b:c6:10:d8:40:b3:50:74:43:49:2d:b7:8e:
fa:da:35:a7:6e:c0:93:32:f7:28:ef:09:ba:04:07:bd:12:51:
a5:bb:7c:fd:a5:88:fa:a3:e6:c9:c2:ee:11:37:cd:f0:16:51:
40:e2:89:4d:62:18:3a:e8:3a:6c:28:1f:d5:05:74:a6:45:0b:
d3:ca:1c:bd:88:64:ec:c2:6c:86:3f:1b:df:0f:3e:1c:ef:4c:
60:e8:69:69:34:83:53:30:dc:5c:8a:e6:87:6e:0b:44:da:8d:
4c:c3:1c:3b:73:90:60:eb:ea:1f:c4:0e:95:bf:7e:5e:e3:35:
65:07:83:2c:14:0b:fc:63:1e:cc:d8:68:79:03:62:3e:78:57:
98:45:5b:1b:e2:4b:ee:cb:a2:6d:49:e6:29:59:5b:a2:bc:c9:
2b:b6:4e:a4:1c:5e:4f:ec:d0:39:f5:6e:5b:63:9c:a4:83:7b:
19:aa:35:ce:70:0e:79:d1:ea:3b:d1:b3:54:77:25:b2:93:46:
00:40:b8:40:b1:34:14:53:2e:31:78:de:1d:83:65:50:3c:c0:
e0:80:63:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:52 2026 by rpki-client